Is CVE-2026-9864 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9864?

CVE-2026-9864 has a CVSS v3 severity of MEDIUM (4.8).

Back

CVE-2026-9864

Description

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by an attacker who can estimate when the password was generated.